[Mimedefang] 100K SA limit doesn't seem to be enough any more :(

[Simon Standley]

Guys,

we're seeing a steady increase in the size of HTLM spam here, a great deal of which is well over the 100K. Since prevailing wisdom is that messages > 100K probably aren't spam, they are omitted form SpamAssassin checks, and generally get delivered to users.

Sure, I guess I could just keep increasing the size limit until folks stop complaining, but just a question of where you draw the line? Some of this stuff is 700K+. 

I'm presently re-educating users re- "we never said we'd block 100% of anything", but frankly that's a cop-out (and they know it :).

I already block ZEN, XBL, and persistent offender IPs at MTA level, and do greylisting via grey-milter, which obviously helps a bit.

Does anyone have any suggestions beyond increasing size limit until MTA starts swearing at me??

Thanks

Mup.